RE: [cas-user] designing a fallback authentication scheme

2015-02-06 Thread Mahantesh Prasad Katti
2015 14:57 To: cas-user@lists.jasig.org Subject: Re: [cas-user] designing a fallback authentication scheme Hi Prasad, I think that would be a good solution for what you are describing. I was under the impression you were referring to a fallback scenario in case your own CAS server was not

Re: [cas-user] designing a fallback authentication scheme

2015-02-06 Thread Stephan Arts
To:* cas-user@lists.jasig.org > *Subject:* Re: [cas-user] designing a fallback authentication scheme > > Hi, > > I agree with Jérôme, the simplest and most robust solution is to have > 2 (or in our case 4) CAS servers running in a cluster with a > multi-master LDAP back

RE: [cas-user] designing a fallback authentication scheme

2015-02-06 Thread Mahantesh Prasad Katti
] designing a fallback authentication scheme Hi, I agree with Jérôme, the simplest and most robust solution is to have 2 (or in our case 4) CAS servers running in a cluster with a multi-master LDAP backend. Put a load-balancer in front of your CAS servers and you're done. Okay, on second th

Re: [cas-user] designing a fallback authentication scheme

2015-02-06 Thread Stephan Arts
Hi, I agree with Jérôme, the simplest and most robust solution is to have 2 (or in our case 4) CAS servers running in a cluster with a multi-master LDAP backend. Put a load-balancer in front of your CAS servers and you're done. Okay, on second thought... Maybe not the simplest, but it is very

Re: [cas-user] designing a fallback authentication scheme

2015-02-05 Thread Jérôme LELEU
Hi, I would not recommend to implement such a fallback mechanism on client side: it would be pretty complicated and you would lose all the benefits of a centralized authentication server (security, one link to the authentication source). Why not a failover with two CAS servers? It can be achieved